Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-23203— Icinga has rest API endpoints accessible to restricted users

Quick assessment

Affected
Icinga icingaweb2-module-director
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Icinga Director是Icinga开源的一个 Icinga 配置部署工具。 Icinga Director 1.0.0及之前版本存在访问控制错误漏洞，该漏洞源于REST API端点存在访问控制不当，可能导致信息泄露和配置更改。

CVSS 5.5 · Medium EPSS 0.39% · P32
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-23203

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Icinga has rest API endpoints accessible to restricted users
Source: CVE Program / CVE List V5
Vulnerability Description
Icinga Director is an Icinga config deployment tool. A Security vulnerability has been found starting in version 1.0.0 and prior to 1.10.4 and 1.11.4 on several director endpoints of REST API. To reproduce this vulnerability an authenticated user with permission to access the Director is required (plus api access with regard to the api endpoints). And even though some of these Icinga Director users are restricted from accessing certain objects, are able to retrieve information related to them if their name is known. This makes it possible to change the configuration of these objects by those Icinga Director users restricted from accessing them. This results in further exploitation, data breaches and sensitive information disclosure. Affected endpoints include icingaweb2/director/service, if the host name is left out of the query; icingaweb2/directore/notification; icingaweb2/director/serviceset; and icingaweb2/director/scheduled-downtime. In addition, the endpoint `icingaweb2/director/services?host=filteredHostName` returns a status code 200 even though the services for the host is filtered. This in turn lets the restricted user know that the host `filteredHostName` exists even though the user is restricted from accessing it. This could again result in further exploitation of this information and data breaches. Icinga Director has patches in versions 1.10.4 and 1.11.4. If upgrading is not feasible, disable the director module for the users other than admin role for the time being.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Icinga Director 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Icinga Director是Icinga开源的一个 Icinga 配置部署工具。 Icinga Director 1.0.0及之前版本存在访问控制错误漏洞，该漏洞源于REST API端点存在访问控制不当，可能导致信息泄露和配置更改。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Icinga icingaweb2-module-director >= 1.0.0, < 1.10.4 -

II. Public POCs for CVE-2025-23203

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-23203

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-23203 (1)

Vendor Pages for CVE-2025-23203 (2)

Same Patch Batch · Icinga · 2025-03-26 · 6 CVEs total

CVE-2025-27404 7.7 HIGH Icinga Web 2 DOM-based XSS vulnerability
CVE-2025-27405 7.7 HIGH Icinga Web 2 has XSS in embedded content
CVE-2025-27406 7.7 HIGH Icinga Reporting Stored XSS leads to SSRF
CVE-2025-30164 4.1 MEDIUM Icinga Web 2 has open redirect on login page
CVE-2025-27609 Icinga Web 2 Vulnerable to Reflected XSS

IV. Related Vulnerabilities

Same product: icingaweb2-module-director
Same vendor: Icinga
Same weakness: CWE-200

V. Comments for CVE-2025-23203

No comments yet

Leave a comment